From bfa741db8cac3abe0832769c163bc060a8134169 Mon Sep 17 00:00:00 2001
From: mahdahar <89adham@gmail.com>
Date: Mon, 9 Jun 2025 16:44:05 +0700
Subject: [PATCH] still need testing

---
 app/Controllers/API_TM.php | 43 ++++++--------------------------------
 1 file changed, 6 insertions(+), 37 deletions(-)

diff --git a/app/Controllers/API_TM.php b/app/Controllers/API_TM.php
index 125393b..2d2f9d6 100644
--- a/app/Controllers/API_TM.php
+++ b/app/Controllers/API_TM.php
@@ -126,16 +126,16 @@ class API_TM extends ResourceController {
 		if(isset($result[0])) { $reqid = $result[0]['REQID']; $rpatid = $result[0]['PATID'];  }
 		else { $reqid = ''; $rpatid = ''; }
 
-		echo "$patid<br/>$reqid - $rpatid";
+		//echo "$patid<br/>$reqid - $rpatid";
 
 		// check data patient
 		if($patid == '') { // new patient 
 			$sql = "INSERT INTO cmod.dbo.CM_TM_PATIENTS (PATNUMBER, FIRSTNAME, LASTNAME, BIRTHDATE, SEX, PHONE ) VALUES ('$rm', '$firstname', '$lastname', '$dob', '$sex', '$phone' )"; 
-			//$db->query($sql); $patid = $db->insertID();
+			$db->query($sql); $patid = $db->insertID();
 		} else { // existing patient
 			if($rpatid == $patid ) { // if patient is the same
 				$sql = "UPDATE cmod.dbo.CM_TM_PATIENTS SET FIRSTNAME='$firstname', LASTNAME='$lastname', BIRTHDATE='$dob', SEX='$sex', PHONE='$phone' where PATID='$patid'"; 
-				//$db->query($sql);
+				$db->query($sql);
 			} else {
 				return $this->failForbidden('Error. Invalid patient data.');
 			}
@@ -145,44 +145,14 @@ class API_TM extends ResourceController {
 			if( $reqid == '' ) { // new request
 				$sql = "INSERT INTO cmod.dbo.CM_TM_REQUESTS (REFFID, REQNUMBER, REQDATE, AGENT, DOC, LOC, PATID, COMPANY, LOGDATE, BW, BH, VISITDESC, VISITTYPE, REQSTATUS) 
 					VALUES ('$reffid', '$visitnum', '$visitdt', '$agentname', '$doc', '$loc', '$patid', '$company', '$createdt', '$bw', '$bh', '$visitdesc', '$visittype', '$reqstatus' )"; 
-				//$db->query($sql); $reqid = $db->insertID();
-				echo "$sql";
+				$db->query($sql); $reqid = $db->insertID();
 			} else { // existing request
 				$sql = "UPDATE cmod.dbo.CM_TM_REQUESTS SET REQNUMBER='$visitnum', REQDATE='$visitdt', AGENT='$agentname', DOC='$doc', LOC='$loc', PATID='$patid', 
 					COMPANY='$company',LOGDATE='$createdt', BW='$bw', BH='$bh', VISITDESC='$visitdesc', VISITTYPE='$visittype', REQSTATUS='$reqstatus'
 					where REQID='$reqid'"; 
-				//$db->query($sql);
-				echo "$sql";
+				$db->query($sql);
 			}
 		} 
-		/*
-		if(!isset($results[0])) { 
-			$sql = "INSERT INTO cmod.dbo.CM_TM_PATIENTS (PATNUMBER, FIRSTNAME, LASTNAME, BIRTHDATE, SEX, PHONE ) VALUES ('$rm', '$firstname', '$lastname', '$dob', '$sex', '$phone' )"; 
-			$db->query($sql);
-			$patid = $db->insertID();
-		} else { 
-			$patid = $results[0]['PATID'];
-			$sql = "UPDATE cmod.dbo.CM_TM_PATIENTS SET FIRSTNAME='$firstname', LASTNAME='$lastname', BIRTHDATE='$dob', SEX='$sex', PHONE='$phone' where PATID='$patid'"; 
-			$db->query($sql);
-		}
-		
-		$sql = "select REQID from cmod.dbo.CM_TM_REQUESTS where REFFID='$reffid'";
-		$query = $db->query($sql);
-		$results = $query->getResultArray();
-		if(!isset($results[0])) { 
-			if($reqstatus != 1) {
-				$sql = "INSERT INTO cmod.dbo.CM_TM_REQUESTS (REFFID, REQNUMBER, REQDATE, AGENT, DOC, LOC, PATID, COMPANY, LOGDATE, BW, BH, VISITDESC, VISITTYPE, REQSTATUS) 
-					VALUES ('$reffid', '$visitnum', '$visitdt', '$agentname', '$doc', '$loc', '$patid', '$company', '$createdt', '$bw', '$bh', '$visitdesc', '$visittype', '$reqstatus' )"; 
-				$db->query($sql);
-				$reqid = $db->insertID();
-			}
-		} else { 
-			$reqid = $results[0]['REQID'];
-			$sql = "UPDATE cmod.dbo.CM_TM_REQUESTS SET REQNUMBER='$visitnum', REQDATE='$visitdt', AGENT='$agentname', DOC='$doc', LOC='$loc', PATID='$patid', 
-				COMPANY='$company',LOGDATE='$createdt', BW='$bw', BH='$bh', VISITDESC='$visitdesc', VISITTYPE='$visittype', REQSTATUS='$reqstatus'
-				where REQID='$reqid'"; 
-			$db->query($sql);
-		}
 		
 		// tests
 		$tests = json_decode(json_encode($qpat['tests']), true);;
@@ -208,10 +178,9 @@ class API_TM extends ResourceController {
 		$db->query($sql);
 		
 		//sendORM
-		$this->orm($reqid);
+		//$this->orm($reqid);
 		
 		return $this->respond(201);
-		*/
 	}
 	
 	public function orm($reqid) {